Skip to content

Passive scanner rules version 71

Choose a tag to compare

@zapbot zapbot released this 02 Mar 15:41
· 834 commits to main since this release
a864a7d

Changed

  • Information Disclosure - Suspicious Comments scan rule:
    • Attempts to collect comments from JavaScript content using the ANTLR library, which should be more accurate.
    • Provides more context in the evidence (Issue 9185).
  • The Content Security Policy scan rule leverages an updated version of the htmlunit-csp library that includes support for the trusted-types and require-trusted-types-for directives.